Privacy
Privacy Policy
What we collect, who else sees it, and how to make us delete it.
Last reviewed 23 October 2026
This wording is under legal review. The facts below about how this site works — which services run, what each one receives, which cookies exist — are accurate and were checked against the site itself. The legal framing around them has not yet been settled with our counsel. If anything here matters to a decision you are making, write to hello@bridal-edit.studio and we will answer directly.
The short version
- We collect what you type into a form. Nothing else is asked of you.
- Your enquiry is emailed to us and read by our founder. It is not sold, ever.
- If you pay us by card, you do it through a link we send you. Your card details are entered on Network International’s page, never on this site or in a message to us. We see that you paid, how much and when — never your full card number.
- Google Analytics depends on where you are. In the EEA and the UK it loads but is told, before it runs, that it may not store anything or identify you — so nothing is written to your browser until you agree. Everywhere else it runs from the moment you open the first page and sets a cookie. Either way you can change it — on the banner, or under “Cookie settings” in the footer — and it takes effect immediately. Advertising measurement is switched on. We do not yet show advertisements to people who have visited before — the category covers both, and only the first is in use.
- A second counter runs that the switch does not govern: it sets no cookie and stores nothing on your device, so it cannot recognise you tomorrow and does not follow you elsewhere. Named below, under Umami.
- Our fonts are served from our own site, so opening a page here does not tell a font provider that you did.
- Write to hello@bridal-edit.studio and we will delete what we hold about you and confirm it.
Who is responsible
Bridal Edit Studio FZE LLC, trading as Bridal Edit Studio, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. The registered details are on our imprint. For anything about your data, write to hello@bridal-edit.studio — it reaches our founder directly.
What we collect, and when
When you simply read the site
Our host records the technical details every web server records in order to answer a request: your IP address, your browser and device type, which page you asked for and when. We do not build a profile from it and we do not combine it with anything else.
When you send an enquiry
There are four forms on this site — the couple enquiry, the Editions enquiry, the Gift enquiry and the partner application — and each asks only for what it needs. Between them we may receive: your name, your email address, your phone or WhatsApp number, your country of residence, which UAE emirate you are considering, roughly when you plan to marry, your marital status, the couple's names for a keepsake or an edition, a link to photographs, and whatever you write in the message field.
Most of those fields are optional and every form works without them. We use what you send to answer you and to work out which route actually fits your situation — which is hard to do well without knowing the two nationalities and the timing, which is why we ask.
When you write to us directly
Email and WhatsApp messages reach us as messages. WhatsApp is operated by Meta and your use of it is governed by their terms rather than ours; if you would rather not use it, email works just as well and we answer at the same speed.
When you pay us
There is no checkout on this site. Once a proposal is agreed, we send you a payment link by email or WhatsApp, and it opens a payment page run by Network International, which processes card payments for us. Your card details are entered there and handled by them; they never pass through this site and never reach our inbox.
What comes back to us is the result: that a payment was made, the amount, the date, a payment reference, the name and email address entered on the payment page, and the card type with the number masked. We keep those records for as long as the engagement and UAE accounting and tax rules require.
If you choose to pay in instalments with Tabby, Tabby checks your identity and eligibility itself and runs the plan under its own privacy policy. We receive the confirmation that the payment was approved, not the details of the check.
Why we are allowed to hold it
Because you asked us to do something. You send an enquiry in order to get an answer, and we keep it in order to give you one and to carry out the work if you engage us — which includes taking payment for it. Where the law requires us to keep records of a transaction, we keep them for as long as that requires. If you withdraw, we delete — see below.
How long we keep it
An enquiry that does not become a booking is kept while the conversation is live, and deleted on request at any point. Where you become a client, we keep what the engagement and any record-keeping obligation require, and no longer. We do not hold an enquiry indefinitely on the chance that you come back.
Who processes your data for us
These are the services running on this site today. Each is here because it does a specific job, and each receives only what that job needs.
Vercel
- What it does
- Hosts this website and serves every page you open.
- What it gets
- Technical request data — your IP address, browser and device type, the page requested and the time. This is how any website is served and is not used to profile you.
- Where
- Global edge network; company registered in the USA.
- Their policy
- Vercel privacy policy
Google reCAPTCHA
- What it does
- Checks that a form is being sent by a person rather than a bot, without a puzzle to solve. It loads only once you start filling in a form.
- What it gets
- Technical signals from your browser and from how the page is used, such as your IP address, browser details and pointer or touch movement, needed to make that judgement. Google states that it uses this to run reCAPTCHA and for general security, not for personalised advertising.
- Where
- Global; company registered in the USA.
- Their policy
- Google reCAPTCHA privacy policy
Resend
- What it does
- Delivers your enquiry to us by email, and sends you the confirmation. It runs only when you actually send a form.
- What it gets
- Everything you typed into the form, because that is the message being delivered.
- Where
- USA.
- Their policy
- Resend privacy policy
Network International
- What it does
- Processes card payments. The payment link we send you opens Network International’s own payment page, and that is where your card details are entered — not on this site, and not in a message to us.
- What it gets
- What the payment needs: your card details, the amount, and the name and email address you enter on the payment page. We receive the result — that you paid, how much, when, and a masked form of the card number — never the full card number or its security code.
- Where
- United Arab Emirates. A card payment also passes through the card network and the bank that issued your card, wherever they operate.
- Their policy
- Network International privacy policy
Tabby
- What it does
- Lets you pay in instalments, if you choose to. Tabby checks your identity and eligibility itself and runs the instalment plan under its own terms, so for that part it answers to you directly.
- What it gets
- The details needed to set up the plan — your name, contact details and the amount — and whatever Tabby asks you for itself to decide eligibility. We receive the confirmation that the payment was approved.
- Where
- United Arab Emirates.
- Their policy
- Tabby privacy policy
Neon (Databricks)
- What it does
- Holds a statistical record of each enquiry and of each tap on our WhatsApp or phone link, so we can see how many people reach out, when, and through which page or advertisement. It runs only when you send a form or tap one of those links.
- What it gets
- For each enquiry: the time, which form and options you chose, your country as given on the form, an approximate location and device type derived from the request, the page you arrived on, the site or advertisement that sent you, and a keyed one-way hash of your email address so a second enquiry from you is counted once. Never your name, email address, phone number or message. For a tap on the WhatsApp or phone link: the time, the page and where on it the link sat, and the same location, device and origin details — with no identifier at all, so two taps cannot be linked to one person.
- Where
- European Union (Frankfurt, Germany); company registered in the USA.
- Their policy
- Neon (Databricks) privacy policy
Google Tag Manager
- What it does
- Loads the measurement and advertising tools listed below. It is a container: on its own it collects nothing, but everything inside it runs through it.
- What it gets
- Technical request data, and whatever the tools inside it are configured to collect.
- Where
- USA and other countries in which Google operates.
- Their policy
- Google Tag Manager privacy policy
Google Analytics 4
- What it does
- Measures how the site is used in aggregate — which pages are read, how people arrive, where they stop.
- What it gets
- A pseudonymous identifier, your approximate location derived from your IP address, and the pages you view.
- Where
- USA and other countries in which Google operates.
- Their policy
- Google Analytics 4 privacy policy
Umami
- What it does
- Counts visits so we can see whether the site works — which pages are read, and where people arrive from. It is the one measurement tool that runs without asking you first, because it sets no cookie and stores nothing on your device. It cannot recognise you on a later visit, and it cannot follow you to another site.
- What it gets
- The page you opened, the site you arrived from, and your browser, device type and country. No cookie, no identifier that persists after your visit.
- Where
- Umami Cloud, operated from the USA with servers in the USA and the EU.
- Their policy
- Umami privacy policy
Google Ads
- What it does
- Measures whether an advertisement led to an enquiry, and allows us to show advertisements to people who have visited before.
- What it gets
- The fact that an advertisement led you here, and — if you send an enquiry — a one-way hashed form of the email address and phone number you entered, so the enquiry can be matched to the advertisement.
- Where
- USA and other countries in which Google operates.
- Their policy
- Google Ads privacy policy
Fonts are served from our own site
The typefaces here are hosted by us, not fetched from Google Fonts or any other font service. Opening a page does not send your IP address to a font provider. It is worth stating plainly because it is one of the few things about a website a visitor cannot check without opening developer tools.
What we have not switched on yet
None of the following is running today. When one of them is switched on it will appear in the list above rather than being quietly added. Anything among them that measures or advertises will be governed by the “Cookie settings” control exactly as measurement is: told to store nothing until you agree if you are in the EEA or the UK, and off from the moment you say so everywhere else.
Cloudflare Turnstile — not active
- What it will do
- Checks that a form is being sent by a person rather than a bot. It runs on every page that carries a form.
- What it will get
- Technical signals from your browser needed to make that judgement. It is not an advertising product and does not track you across sites.
- Where
- Global; company registered in the USA.
- Their policy
- Cloudflare Turnstile privacy policy
Storyblok — not active
- What it will do
- Content management, for text and images published on this site.
- What it will get
- Nothing about you. It supplies content to the site; it does not receive your details.
- Where
- European Union (EU data region).
- Their policy
- Storyblok privacy policy
Transfers outside the UAE and the EU
Several of the services above are operated by companies registered in the United States, so data they handle may be processed there or in other countries. We choose providers that offer standard contractual protections for that transfer. If where your data is processed matters to you, ask and we will tell you exactly what applies to your case.
Your rights
You can ask us to:
- tell you what we hold about you,
- correct anything that is wrong,
- delete it,
- send you a copy in a portable form,
- stop using it for a particular purpose.
Write to hello@bridal-edit.studio. We do not require a form, a reason or a particular wording, and we confirm in writing once it is done. If you are in the EU or the UK and are not satisfied with how we handle it, you may complain to your national data protection authority.
Children
This site is not intended for children and we do not knowingly collect anything about them.
Security
The site is served over HTTPS. Forms are protected against automated abuse by a hidden trap field and by Google reCAPTCHA. Enquiries reach us as email rather than being written to a database on this site, which means there is no visitor database here to be breached. Card payments are made on Network International’s payment page, which handles card data under the payment industry’s security standard (PCI DSS), so card details never pass through this site or our inbox either.
Cookies
Which cookies exist, what each is for and how long it lasts is set out on the cookie policy. The short answer is that five are set whichever way you answer, all strictly necessary and none of them used to track you, and that Google Analytics adds one more — only once you have agreed, if you are reading from the EEA or the UK. You can change that at any time from “Cookie settings” in the footer.
Changes
When this policy changes we update the review date at the top. If a change is material — a new service that receives your data, or a new purpose — we will say so here rather than leave you to spot it.
Contact
Bridal Edit Studio
hello@bridal-edit.studio
+971 54 277 5280